This seminar was delivered at the Symbiosis Institute of Technology during Summer School.

1. SIT
Computer Science & Information
Technology Department
Welcomes all
Summer School Students
Symbiosis Institute of
Technology
Symbiosis International (Deemed University)

2. CYBER SECURITY
FUNDAMENTALS

3. Presented by
▪ Pooja Kamat, Assistant Professor (CS & IT department)
– Research Interests include: Cyber security, Software Engineering
▪ Apurv Singh Gautam,ThirdYear (I.T) student
– Network PenetrationTester, Security Enthusiast, Hacker, CTF Player
– Speaker at Null the Open Security Community, Pune

4. WHAT TO EXPECT??

5. NEED OF SECURITY
▪ Increasing awareness of technology but not Security
▪ Continuous Development & Competition in IT
▪ Increasing number of Cyber Criminals
▪ Increasing use of Network elements & applications
▪ Decreasing level of skill set

7. NEED OF SECURITY
▪ Any Security breach in the website of any person increases the risk of
the public image
▪ Any Security breach in the website of any company increases the risk
of company reputation
▪ Any Security breach in the government website may increase the risk
on project management and government operations
▪ Any Security breach in the Military sector may jeopardise the safety
of any country

9. What is HACKING??
▪ Hacking is an art of exploring various security breaches
▪ What people believe: It’s an anti-social activity
: All the hackers are bad people
▪ The terms Hacker and Hacking are being misinterpreted and misunderstood with
negative sidelines

10. COMMUNITIES OF HACKERS
▪ Hackers
▪ Crackers
▪ Phreaks
▪ Script Kiddies

11. TYPES OF HACKERS
▪ White Hat Hacker -They use their knowledge and skill set for good constructive
intents.They find out new security loopholes and their solutions
▪ Black Hat Hacker -They use their knowledge and skill set for illegal activities and
destructive intents
▪ Grey Hat Hacker –They use their knowledge and skill set for legal and illegal
purpose.They are white hats in public but internally they do some black hat work

12. HACKING STRATEGY
▪ Reconnaissance (Information Gathering)
▪ Scanning
▪ Gaining Access
▪ Maintaining Access
▪ CoveringTracks

13. Cyber Crime is no more FUN…!!!
▪ Cyber crime controlled by IT ACT 2008 and respective IPC (constantly
evolving)
▪ Complete control of Govt agencies over information stored,
processed and transmitted over internet
▪ Upgradation of Investigating agencies with latest technology
▪ Service providers like ISPs, email service providers, etc are liable to
share information with Govt agencies
▪ Upgradation of Forensic labs
▪ Stringent punishment for cyber crimes

14. Common Scenarios - Cyber Pornography
▪ Cyber pornography covers pornographic websites, pornographic
magazines produced using computers and the Internet.
▪ Whoever publishes or transmits or causes to be published in the
electronic form, any material which is obscene in nature falls under cyber
pornography
▪ Section 67: Punishment for publishing or transmitting obscene material
in electronic form
▪ Punishment – Imprisonment from 2 – 10 years with fine upto 10 lakhs

15. Common Scenarios – Identity Theft
▪ Identity theft is a term used to refer to fraud that involves stealing money or
getting other benefits by pretending to be someone else.
▪ Section 66C Punishment for identity theft.
Whoever, fraudulently or dishonestly make use of the electronic signature, password
or any other unique identification feature of any other person, shall be punished with
imprisonment of either description for a term which may extend to three years and
shall also be liable to fine which may extend to rupees one lakh.
▪ Section 66D Punishment for cheating by personation by using computer
resource
Whoever, by means of any communication device or computer resource cheats by
personation, shall be punished with imprisonment of either description for a term
which may extend to three years and shall also be liable to fine which may extend to
one lakh rupees.

16. INTRODUCTION TO
SOCIAL ENGINEERING
“Cause there’s no PATCH for HUMAN STUPIDITY”

17. What is SOCIAL ENGINEERING??
In context of Information Security, it is the use of deception
to manipulate individuals into divulging confidential or
personal information that may be used for fraudulent
purposes.

19. TECHNIQUE
▪ Human Interaction
▪ Respectable & Known Person or Entity
▪ Assembling all gathered information together

20. TYPES OF SOCIAL ENGINEERING
▪ Quid Pro Quo – Something for something
▪ Phishing
▪ Baiting
▪ Pretexting
▪ DiversionTheft

21. Phishing Email

24. WEAKEST LINK??
No matter how strong your:
▪ Firewalls
▪ IDS & IPS
▪ Cryptography
▪ Anti-Virus Software
▪ You are the weakest link in computer security. People are more vulnerable than
computers.
▪ “The weakest link in the security chain is the human element: - Kevin Mitnick

25. WAYS TO PREVENT SOCIAL ENGINEERING
▪ User Awareness
▪ Policies
▪ Third partyTest
▪ Be Smart

28. Students prone to Cyber Crime
REASONS:
▪ Prank
▪ Jealousy
▪ Revenge
▪ Ignorance
▪ Ex-relationships
▪ Curiosity
▪ Blackmailing
▪ Pornography

30. RANSOMWARE

31. CYBER SECURITY
AWARENESS TIPS

32. Safe Computing Tips
▪ Keep yourComputer Updated

33. ▪ Keep all the software up to date
▪ Do not use openWi-Fi
▪ Lock the system when not in use
▪ Download Files Legally (Don’t useTorrents :P)
▪ Backup on regular basis
▪ Use goodAnti-Virus
▪ Use good Proxy/VPN

34. ▪ Cover Mic and Camera withTape

35. ▪ Don’t store password in browser

36. ▪ UseTOR

37. Internet Surfing Tips
▪ Use private browsing in Chrome/Firefox
▪ Check for green lock and HTTPS in URL
▪ Keep your browser Up to Date
▪ Never click on unknown links
▪ Turn on Do NotTrack feature in the browser
▪ Delete your profile from sites which you don’t use
(http://backgroundchecks.org/justdeleteme/)
▪ Use Sandboxie

38. ▪ Use DuckDuckGo browser
▪ Use Panopticlick (https://panopticlick.eff.org/)

39. ▪ UseVirusTotal for checking files
(https://www.virustotal.com/#/home/upload)

40. Mobile Security Tips
▪ Lock your phone using screen lock
▪ Do not connect to unknownWi-Fi networks
▪ Do not connect your phone using USB to unknown devices
▪ Always update OS as soon as it releases
▪ Use LockApps for Files and Media
▪ Use Guest Mode
▪ Keep sensitive files on authentic Cloud Storages

41. ▪ Do not Jailbreak or Root your smartphone
▪ Download apps from authorized app stores only
▪ Use Privacy options and disallow any permissions that is not
necessary
▪ Do not accept calls from weird numbers (VoIP Calls)
▪ Schedule Routine Scans
▪ Don’t react to Scarewares and Adwares

42. Scarewares

43. Beware of these kind of APPS !!

44. Password Protection Tips
▪ Use different passwords for each account
▪ Always log off from your accounts
▪ Avoid entering password on computer that you don’t control
▪ Beware of keyloggers
▪ Use complex password (Take help of password generators)
▪ Use reliable password vaults (KeepPass, PassPack)
▪ Use two-factor authentication
▪ Don’t write true answers during security questions

46. Email & Chatting Tips
▪ Use encrypted emails like Proton Mail, Mailvelope
▪ Use end-to-end encrypted chat applications likeTelegram, Signal,
Wickr, CHatSecure
▪ Delete unused accounts
▪ Don’t fill out your full information on social sites
▪ Use temporary mails for services you do not trust (Temp-Mail,
Guerrilla Mail)
▪ Use Mail2Tor for sharing sensitive information

47. ▪ Read all the permission that third party application want to access in
your email account

48. Social Media Tips
▪ Check privacy settings. Do not show anything which is sensitive
▪ Limit your Bio information
▪ Avoid sharing account details
▪ Choose friends wisely over the internet
▪ Think before you share something online (status, pics, videos)
▪ Use different passwords for each social media account
▪ Restrict friend requests
▪ Access Control (who can see what)

50. ▪ Protect your identity online
▪ Don’t share information to anyone including your friends like Full
Name, Parent’s Name, D0B,Travel Plans etc

52. Did you Know that ?
▪ According to IT Act 2008 Section 66A Identity theft will result in 3
years jail and 5 lakh

53. Banking Tips
▪ Use OnlineVirtual Keyboard provided by the Banking website
▪ Never check “Remember Me” on banking websites
▪ Never use banking services on publicWi-Fis or cyber café.
▪ Always use 2 Factor Authentication
▪ Create a really strong password for Banking
▪ Change your password and ATM Pin regularly
▪ Beware of Shoulder Surfing

56. Preventing Online Scams
▪ Always check URLs of the sites you visit
▪ Always write the URL yourself instead of clicking on the link
▪ For suspicious links check the links on AVG ThreatLabs, Kaspersky
VirusDesk, Scanurl, PhishTank, etc
▪ Never believe in any offers saying “you won something”. No one is giving
free money
▪ Never click on unknown ads or pics
▪ Use pop-up blockers
▪ Try to avoid and make a distance with people having malicious intents

60. THANK YOU !!
▪ Email –
▪ pooja.kamat@sitpune.edu.in
▪ apurvsinghgautam@gmail.com
▪ Social Handle – apurvsinghgautam
(LinkedIn,Twitter, Quora)